Overview
overview
7Static
static
3e9f7c9f107...18.exe
windows7-x64
7e9f7c9f107...18.exe
windows10-2004-x64
7$PLUGINSDI...am.dll
windows7-x64
3$PLUGINSDI...am.dll
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
1$PLUGINSDI...ns.dll
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$PLUGINSDI...ta.dll
windows7-x64
3$PLUGINSDI...ta.dll
windows10-2004-x64
3$PLUGINSDIR/stack.dll
windows7-x64
3$PLUGINSDIR/stack.dll
windows10-2004-x64
3GConverter.exe
windows7-x64
1GConverter.exe
windows10-2004-x64
1GToolbar.dll
windows7-x64
6GToolbar.dll
windows10-2004-x64
6GUpdate.exe
windows7-x64
1GUpdate.exe
windows10-2004-x64
1Analysis
- max time kernel
118s - max time network
122s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
09/04/2024, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/SetHoldData.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/SetHoldData.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/stack.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/stack.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral19
Sample
GConverter.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
GConverter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
GToolbar.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
GToolbar.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
GUpdate.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
GUpdate.exe
Resource
win10v2004-20240226-en
General
- Target GUpdate.exe
- Size 196KB
- Sample240409-pfawbsaa2y
- SHA256 de4ba9c67d8859a208c6b98fede21cd6be61073dd2f9d9239761595d7258af9f
- MD5 66a5bd1c4fddfbd195582598080940f3
- SHA1 a52c9ea23d2b76b4475d4bd401a4058781f9f859
- SHA512 b8a856e1ba324e668983bd9b1b4cd9c3f2ea4195c5b00c1c718619021e53cba03bbaeaff086869ad168feb3b624a9f12ac1e91fd61acd5230820a6c10bd61f09
- SSDEEP 768:nfX5c4/QhSMnUNmcL+Q2QzDr9cHSiU3p4rwVdUEc2ZI8DmG94kDvB2pi:nv5f/Q0GmL+4KHSDy6sO94kNIi
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2332 GUpdate.exe 2332 GUpdate.exe